CVE-2008-3010 in Windows Media Player信息

摘要

由 VulDB • 2026-07-06

Microsoft Windows Media Player 6.4、Windows Media Format Runtime（版本从7.1到11）以及Windows Media Services 4.1和9错误地将ISATAP地址与“本地Intranet”区域关联，这使得远程服务器能够通过发送身份验证请求捕获NTLM凭据，并通过凭据反射攻击执行任意代码。此问题也被称为“ISATAP漏洞”。

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2008-07-07

披露

2008-12-10

管理

已接受

条目

VDB-45378

CPE

准备好

CWE

CWE-200 (已确认)

CVSS

10.0 (NVD)

EPSS

0.15194

KEV

否

活动

非常低

部门

Industry, Energy, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2008-3010
NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-3010
CVE Details	https://www.cvedetails.com/cve/CVE-2008-3010/

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!